analyze-security: do not assign badness to filtered-out syscalls

Fixes #16451, https://bugzilla.redhat.com/show_bug.cgi?id=1856273.

(cherry picked from commit 01ecb367)
(cherry picked from commit 8b62cadf)
(cherry picked from commit 1997c278)
(cherry picked from commit 9b078df0)